
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
File: NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json)
Hash identifier: MEsuWXrNfXW/RGafJHa9SaEY7R+GdvUSPm8K42VfXck=
Subject key identifier: 4C:D2:30:3B:58:DE:78:6E:7B:02:62:AE:66:B7:64:FF:E8:A9:8C:D6
Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
Certificate issuer: /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Certificate serial: 0EBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
Manifest number: 0EB3
Signing time: Tue 12 May 2026 17:43:16 +0000
Manifest this update: Tue 12 May 2026 17:43:16 +0000
Manifest next update: Tue 19 May 2026 17:43:16 +0000
Files and hashes: 1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: 9gmuLZOvzApBr0RFhhziCoTjzyzlePZebU0VLvMSQK4=)
2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: dp3B1RDsd11FNh3UQSta7bEw7zg/YxUAJYRv+iUtn2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3775 (0xebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Validity
Not Before: May 12 17:43:16 2026 GMT
Not After : May 19 17:43:16 2026 GMT
Subject: CN=6a0366b4-1dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:21:79:39:31:d4:97:b9:a9:5b:bb:f6:60:
d7:ee:8d:c7:87:58:b6:15:97:7f:68:2b:cf:5a:fa:
ef:c3:e1:44:ab:04:aa:1a:cd:d7:54:15:9c:17:34:
25:23:41:1c:8c:65:04:31:6a:f1:ab:e6:f4:74:ca:
54:34:04:37:a7:8e:10:07:cd:97:53:74:40:77:cb:
dc:e4:8e:21:eb:13:c7:ea:5c:83:ae:04:8b:17:de:
3f:37:72:1f:35:db:89:d0:94:a8:24:b9:7a:9b:a8:
39:2e:17:6a:c1:0f:45:c6:5f:1a:06:f9:7d:70:2b:
d3:14:9a:d5:65:21:17:90:1d:54:5b:f9:f6:fe:7e:
bd:4e:07:5f:cf:0a:e2:a6:4b:08:85:75:f9:af:d9:
27:cd:d4:f6:9c:4c:d9:9a:cb:72:6a:c3:a5:88:88:
9e:b2:2e:47:40:35:d3:67:3c:30:63:27:d8:6a:91:
bb:d6:02:a3:32:c2:17:f1:97:c7:99:b2:da:20:0d:
89:df:9d:7d:c3:c0:2c:2d:a0:48:bf:e5:e3:cb:7a:
04:0b:57:11:d9:00:f7:71:4e:80:b2:35:7b:fb:b5:
41:b8:3d:fb:56:c5:3b:ed:39:a9:d7:0f:15:29:9c:
bb:c5:74:bd:92:e8:a0:4f:21:9b:9f:26:11:99:40:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D2:30:3B:58:DE:78:6E:7B:02:62:AE:66:B7:64:FF:E8:A9:8C:D6
X509v3 Authority Key Identifier:
keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:66:b2:44:96:1f:79:ec:e0:76:3f:e5:d5:f9:6f:6c:f4:ad:
ef:ae:63:70:9c:6b:4c:33:c8:d9:85:a6:4f:84:80:76:43:89:
a8:00:0c:39:a0:ca:e6:d6:1d:c3:f4:fe:89:89:54:0d:5d:a3:
41:09:3f:99:5d:c1:93:ab:db:12:bd:e4:2f:b3:a1:08:02:e5:
77:ca:10:d0:55:8b:ec:98:e3:39:ba:bd:2e:b8:04:cb:56:44:
12:1d:c2:c8:1e:13:27:fc:3b:ee:2c:45:75:84:33:54:a8:2d:
86:4f:73:8f:8c:f0:b7:e5:3b:73:e3:0d:9f:5b:24:30:cf:62:
ea:26:6d:80:ba:e6:ce:90:ad:99:e8:56:bd:e3:31:88:bc:82:
ed:29:55:cf:3d:60:72:9b:f9:be:9b:9c:32:c5:20:ec:a0:e8:
40:9f:e5:e0:6f:78:bc:a2:5a:a0:82:88:21:c2:cd:1b:0d:00:
55:06:cc:e0:10:ee:11:51:6d:d8:c0:b6:ba:a2:35:8f:e5:64:
de:b4:01:4e:c3:55:4f:aa:c8:7b:8f:04:50:21:6b:ee:3a:8b:
b1:bf:9d:1e:7e:b0:f0:10:8f:87:a2:d5:6a:5a:37:74:a2:84:
57:2a:21:f0:0b:f1:dc:58:1a:1d:eb:02:f0:4f:1c:5e:17:13:
77:d9:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:13 2026 by rpki-client